$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c144215a-4d27-3e9f-ba3d-86cbd80e79d1.roa File: c144215a-4d27-3e9f-ba3d-86cbd80e79d1.roa (raw, json) Hash identifier: 9zjsOrzrGwGl1ooDJw3AReR2X/2zp3inMybSW1Wv7jY= Subject key identifier: 7A:B5:57:3F:E3:B0:E3:3C:25:D4:BD:E4:F7:9E:73:34:49:57:8A:49 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E66DA021C0EDD2C307B6BF080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c144215a-4d27-3e9f-ba3d-86cbd80e79d1.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 31898 IP address blocks: 158.101.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:02:1c:0e:dd:2c:30:7b:6b:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=ff29b83f-6b58-438b-a9f5-cd8b90f1d7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:27:31:5b:3d:03:93:04:6c:96:ac:91:37:10: 22:ad:2c:ea:4d:68:ad:39:c9:1c:02:53:11:24:51: a5:76:13:4b:17:03:5a:f6:ca:87:ec:c9:15:b8:e6: a6:e0:ba:99:eb:45:0c:a0:1f:36:70:2e:03:39:19: 3f:f3:93:21:d4:ac:9e:15:0a:d5:a4:0c:69:8a:fa: 19:cd:5e:cf:ff:aa:41:4d:78:3e:cc:dd:1d:ba:76: cf:07:e9:e0:b6:f6:8b:73:b7:22:d5:89:df:1a:33: 7e:f2:29:fa:c5:c9:87:89:15:d1:5d:cf:ef:f2:69: 7a:38:9a:78:bc:a4:30:26:de:c4:f2:98:ca:75:6c: 9a:9b:10:0e:49:10:fb:eb:c5:83:50:0b:3d:2f:73: f8:51:09:4d:58:56:d1:78:55:c4:00:e0:48:3d:51: 4d:bb:2e:cb:2d:0f:31:e5:7e:af:a6:00:86:f3:f7: 08:8a:30:5b:8a:b6:78:c6:6f:78:d5:3b:74:38:50: ca:85:22:02:ce:08:72:db:6e:f5:42:ee:93:ee:10: 50:8f:59:2a:2a:a1:68:24:e9:14:ac:d7:2a:28:9f: ef:c4:09:b6:89:d5:06:a9:d8:67:83:bd:82:4d:20: 32:1c:54:b8:cd:61:9a:1a:03:5f:1e:66:a9:71:4e: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B5:57:3F:E3:B0:E3:3C:25:D4:BD:E4:F7:9E:73:34:49:57:8A:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c144215a-4d27-3e9f-ba3d-86cbd80e79d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 158.101.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:95:a7:48:4a:42:fe:0f:53:34:e7:8a:95:bd:8a:ba:fa:7d: 0d:f4:85:88:88:ca:62:28:09:2c:78:b7:85:a9:1e:6b:4c:c2: 57:96:99:00:d2:d1:41:0a:d7:27:aa:50:d3:39:56:d8:3e:21: 08:55:18:e3:68:9c:74:0c:95:d3:27:1b:e4:18:6c:a9:8f:b2: 71:f2:83:1c:e8:02:ed:02:75:1d:78:15:da:6e:2b:28:76:8f: 8c:f3:fa:78:dc:bb:09:1d:14:3c:14:a1:29:c8:e1:41:6d:60: 32:69:96:1b:b4:7a:b1:a8:35:39:89:b6:32:af:f8:85:6c:3e: 75:01:19:53:42:30:51:1d:98:64:9d:bb:93:f7:6d:c1:2f:4a: 26:0c:c3:99:63:10:9e:b5:ab:57:b3:7a:6e:52:e2:d5:90:94: 28:15:2b:d8:a7:b3:f5:8d:6a:3d:21:dc:e0:5e:18:33:34:50: 69:14:33:62:01:f3:b1:e3:69:87:c2:d3:06:dc:27:5d:f8:2e: 91:ed:d1:18:da:d0:0a:7b:46:f8:eb:99:51:c1:c8:4d:24:65: c3:06:c5:77:62:80:9d:79:aa:47:5f:05:ee:a5:c0:66:f1:9e: 3e:2e:35:db:da:0c:12:1c:9b:25:55:3f:94:f3:aa:2b:bd:c9: be:06:0c:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2gIcDt0sMHtr8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk ZmYyOWI4M2YtNmI1OC00MzhiLWE5ZjUtY2Q4YjkwZjFkN2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjycxWz0DkwRslqyRNxAirSzqTWitOckcAlMR JFGldhNLFwNa9sqH7MkVuOam4LqZ60UMoB82cC4DORk/85Mh1KyeFQrVpAxpivoZ zV7P/6pBTXg+zN0dunbPB+ngtvaLc7ci1YnfGjN+8in6xcmHiRXRXc/v8ml6OJp4 vKQwJt7E8pjKdWyamxAOSRD768WDUAs9L3P4UQlNWFbReFXEAOBIPVFNuy7LLQ8x 5X6vpgCG8/cIijBbirZ4xm941Tt0OFDKhSICzghy2271Qu6T7hBQj1kqKqFoJOkU rNcqKJ/vxAm2idUGqdhng72CTSAyHFS4zWGaGgNfHmapcU4bYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHq1Vz/jsOM8JdS95PeeczRJV4pJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzE0NDIxNWEtNGQyNy0z ZTlmLWJhM2QtODZjYmQ4MGU3OWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnmVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyVp0hKQv4PUzTnipW9irr6fQ30hYiIymIoCSx4t4WpHmtMwleWmQDS 0UEK1yeqUNM5Vtg+IQhVGONonHQMldMnG+QYbKmPsnHygxzoAu0CdR14FdpuKyh2 j4zz+njcuwkdFDwUoSnI4UFtYDJplhu0erGoNTmJtjKv+IVsPnUBGVNCMFEdmGSd u5P3bcEvSiYMw5ljEJ61q1ezem5S4tWQlCgVK9ins/WNaj0h3OBeGDM0UGkUM2IB 87HjaYfC0wbcJ134LpHt0Rja0Ap7RvjrmVHByE0kZcMGxXdigJ15qkdfBe6lwGbx nj4uNdvaDBIcmyVVP5Tzqiu9yb4GDCI= -----END CERTIFICATE-----Generated at Mon Jul 13 02:52:03 2026 by rpki-client